CheckPoint Check Point Certified Security Administrator R71 - 156-215.71 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

A. Can be used for securing internal network communications between the Security Gateway and an OPSEC device. B. Uniquely identify machines installed with Check Point software only. They have the same function as RSA Authentication Certificates. C. Are for Security Gateways created during the Security Management Server installation. D. Increase network security by securing administrative communication with a two-factor challenge response authentication.

Discussion 0

Correct Answer: A Vote an answer

Question 2

You wish to configure an IKE VPN between two R71 Security Gateways, to protect two networks.
The network behind one Gateway is 10.15.0.0/16, and network 192.168.9.0/24 is behind the peer's Gateway. Which type of address translation should you use to ensure the two networks access each other through the VPN tunnel?

A. Hide NAT B. None C. Manual NAT D. Static NAT

Discussion 0

Correct Answer: B Vote an answer

Question 3

Which NAT option applicable for Automatic NAT applies to Manual NAT as well?

A. Translate destination on client-side B. Allow bi-directional NAT C. Enable IP Pool NAT D. Automatic ARP configuration

Discussion 0

Correct Answer: A Vote an answer

Question 4

When using SecurePlatform, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

A. Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings. B. As expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up C. Edit the file /etc/sysconfig/netconf.c and put the new MAC address in the field (conf : (conns
:( conn :hwaddr ("00:0C:29:12:34:56") D. As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56

Discussion 0

Correct Answer: B Vote an answer

Question 5

The URL Filtering Policy can be configured to monitor URLs in order to:

A. Block sites only once. B. Redirect users to a new URL. C. Log sites from blocked categories. D. Alert the Administrator to block a suspicious site.

Discussion 0

Correct Answer: C Vote an answer

Question 6

What can NOT be selected for VPN tunnel sharing?

A. One tunnel per VPN domain pair B. One tunnel per Gateway pair C. One tunnel per pair of hosts D. One tunnel per subnet pair

Discussion 0

Correct Answer: A Vote an answer

Question 7

The customer has a small Check Point installation, which includes one Linux Enterprise 3.0 server working as the SmartConsole, and a second server running Windows 2003 as both Security Management Server and Security Gateway. This is an example of a(n):

A. Distributed Installation B. Hybrid Installation C. Unsupported configuration D. Stand-Alone Installation

Discussion 0

Correct Answer: C Vote an answer

Question 8

The fw monitor utility would be best to troubleshoot which of the following problems?

A. You get an invalid ID error in SmartView Tracker for phase 2 IKE key negotiations. B. A statically NATed Web server behind a Security Gateway cannot be reached from the Internet. C. A user in the user database is corrupt. D. An error occurs when editing a network object in SmartDashboard

Discussion 0

Correct Answer: B Vote an answer

Question 9

In a distributed management environment, the administrator has removed all default check boxes from the Policy / Global Properties / Firewall tab. In order for the Security Gateway to send logs to the Security Management Server, an explicit rule must be created to allow the Security Gateway to communicate to the Security Management Server on port ______.

A. 900 B. 256 C. 259 D. 257

Discussion 0

Correct Answer: D Vote an answer

Question 10

Which operating systems are supported by a Check Point Security Gateway on an open server?

A. Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO B. Check Point SecurePlatform and Microsoft Windows C. Check Point SecurePlatform, IPSO, Sun Solaris, Microsoft Windows D. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

What rules send log information to Dshield.org when Storm Center is configured?

A. Determined by the Dshield Storm Center Logging setting in Logs and Master of the Security Management Server object rules with tracking set to Log or None. B. Determined in IPS, Dshield Storm Center configuration: Security Management Server sends logs from rules with tracking set to either Alert or one of the specific User Defined Alerts C. Determined in Web Intelligence, configuration: Information Disclosure is configured; rules with tracking set to User Defined Alerts or SNMP trap. D. Determined by the Global Properties configuration: Log defined in the Log and Alerts section, rules with tracking sent to Account or SNMP trap.

Discussion 0

Correct Answer: B Vote an answer

Question 12

How many times is the firewall kernel invoked for a packet to be passed through a VPN connection?

A. Twice B. Three times C. Once D. None The IPSO kernel handles it

Discussion 0

Correct Answer: A Vote an answer

Question 13

Which SmartConsole component can Administrators use to track remote administrative activities?

A. SmartView Tracker B. SmartView Monitor C. Eventia Reporter D. WebUI

Discussion 0

Correct Answer: A Vote an answer

Question 14

What is the desired outcome when running the command cpinfo -z -o cpinfo.out?

A. Send output to a file called cpinfo.out in compressed format. B. Send output to a file called cpinfo.out without address resolution. C. Send output to a file called cpinfo.out and provide a screen print at the same time. D. Send output to a file called cpinfo.out in usable format for the CP InfoView utility.

Discussion 0

Correct Answer: A Vote an answer